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DETAILED ACTION 

1 . Claims 3-7, 9-12 and 14-22 are pending in the application. 

Claim Rejections - 35 USC §103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

3. Claims 3-7, 9-12, 14-17 and 19-25 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Boswell, ("Inside Windows 2000 Server", published 12/22/1999), in view of 
Van Huben et al (hereafter Van Huben) (U.S. Patent 5,878,408). 

4. Boswell was cited in the last office action. 

5. As to claim 14, Boswell teaches the invention substantially as claimed including a 
method for restoring of policy objects associated with a directory service of a computer system, 
comprising: 

backing up a plurality of the policy objects associated with the directory service of the 
computer system [Chap. 11, Backing Up the Directory, pg. 1; Performing Directory 
Maintenance, pg. 10 section Performing an Authoritative Directory Restoration; Chap. 16, 
Managing User Environments with Group Policies, pg. 1, line 5; Chap. 6, Configuring Security 
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Policies, pg. 4 section Group Policy Editor Overview; Fig. 6.3; Chap. 6, Configuring Security 
Policies, Fig. 6.3] (i.e. . . .backing up the registry and the Active Directory. . .restore Directory 
operation by soft recovery. . .restore from backup tape. . .). 

6. Boswell does not specifically teach detecting a problem with a selected one of the 
plurality of policy objects; and restoring the selected one of the plurality of policy objects 
without restoring others of the plurality of policy objects. However, Boswell disclosed 
corruption of the directory database that requires restoring and restoring the all system files 
[Chap. 11, Performing Directory Maintenance, pg. 1, lines 2-3; Repairing the Active Directory 
Database, pg. 9, lines 1-4] and the drawback of the inability to backup or restore just the Registry 
or just the Directory or just the boot files [Chap. 1 1, Backing Up the Directory, pg. 1]. Van 
Huben teaches restoring individual data objects from backed-up or archived repositories in the 
event the data object is deleted from the active library [Van Huben, col. 26, lines 23-43]. 

7. It would have been obvious to one of an ordinary skill in the art at the time the invention 
was made, to have combined the teaching of Boswell with the teaching of Van Huben because 
the teaching of Van Huben compensate the drawback of Boswell by providing the ability to 
recover individual objects that has a problem. 

8. As to claims 3-5, Boswell as modified teaches the invention substantially as claimed 
including wherein the directory service further includes user, computers and printers objects 
[Chap. 8, Strategies for Upper-Level Designs, pg. 3 section Functional Overview of Windows 
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2000 Security Groups, line 8; Chap. 15, Moving Forward, line 3] (i.e.... Active Directory objects 
that represent security principals, such as users, computers. ..printer objects. ..). 

9. As to claim 6, this claim is rejected for the same reason as claims 3-5 above (Examiner's 
interpretation of "a directory service component with a descriptive parameter," as any directory 
service objects with attributes/properties/settings since the applicant did not preclude nor define 
this limitation). 

10. As to claim 7, Boswell as modified does not, specifically teach wherein backing up 
includes storing object settings, links to directory service objects, and security information 
regarding directory service objects. However, Boswell disclosed backing up the system state 
files which includes the Active Directory database, NTDS.DIT, and its associated log and 
checkpoint files, contents of the \SYSVOL directory, etc. [Chap. 11, Backing Up the Directory, 
pg. 1]. It would have been obvious to one of an ordinary skill in the art at the time the invention 
was made, to have recognized that attributes, information, or settings related to a directory 
service object have to be backed-up in order for the object to be restore to its previous 
configuration. 

11. As to claim 11, Boswell as modified teaches the invention substantially as claimed 
including wherein policy data associated with a policy object is stored in a database [Chap. 6, 
Configuring Security Policies, pg. 11] (i.e. Security policies for a local machine are stored in the 
Security Editor database. . .). 
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12. As to claim 12, Boswell as modified teaches the invention substantially as claimed 
including wherein the database where policy data is stored is the registry [Chap. 6, Configuring 
Security Policies, pg. 12, lines 6-7]. 

13. As to claims 15-16, these claims are rejected for the same reason as claim 14 above. 

14. As to claim 17, Boswell as modified teaches the invention substantially as claimed 
including wherein restoring the selected one of the plurality of policy objects includes replicating 
the selected one of the plurality of policy objects across domain boundaries of the computer 
system [Chap. 1 1, Replication Overview, pg. 5 Intrasite Replication Summary]. 

15. As to claim 19, Boswell as modified teaches the invention substantially as claimed 
including wherein a security privilege of the computer system is required to effect a particular 
setting of the policy objects and wherein the method further comprises: delegating the security 
privilege to selected users for selected objects in the directory service [Chap. 10, Overview of 
Directory Security, pg. 13 section Access Rights Delegation] (i.e.... Windows 2000 uses 
delegation to assign the right mix of access permissions., .select the object types over which the 
security principal will exercise control. . .). 

16. As to claim 9, Boswell as modified teaches the invention substantially as claimed 
including wherein various levels of security privileges can be delegated [Chap. 10, Overview of 
Directory Security, pg. 14-17 section Access Rights Delegation, Figs. 10.9-10.1 1]. 
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17. As to claim 10, this claim is rejected for the same reason as claim 9 above. In addition, 
Boswell as modified does not specifically teach wherein the levels of security privileges that can 
be delegated include the ability to configure only one or a plurality of administrative templates 
contained in the policy. However, Boswell disclosed modifying administrative templates [Chap. 
16, Managing User Environments with Group policies, pg. 15, lines 4-9] and delegating 
extended rights [Chap. 10, Overview of Directory Security, pg. 16 section Delegating Extended 
Rights, lines 3-8]. It would have been obvious to one of an ordinary skill in the art at the time 
the invention was made, to have recognized that granular delegation of security privileges can 
further relief the burden of the administrator (i.e. assigning some administrative rights to users 
without granting administrative privileges, as been considered by Boswell) without risking the 
security of an entire active directory. 

18. As to claims 20-21, Boswell as modified does riot specifically teach restoring the selected 
one of the plurality of objects to a domain/a parent domain of the computer system from which it 
was backed up. However, Boswell disclosed replicating the selected one of the plurality of 
policy objects across domain boundaries of the computer system [Chap. 1 1, Replication 
Overview, pg. 5 Intrasite Replication Summary]. It would have been obvious to one of an 
ordinary skill in the art at the time the invention was made, to have restore objects to a domain/a 
parent of a domain of the computer system from which it was backed up because the purpose of 
restoring is to restore to a location where the objects are needed. 



19. 



As to claim 22, this claim is rejected for the same reason as claim 14 above. 
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20. As to claim 23, this claim is rejected for the same reason as claim 14 above. 

21. As to claim 24, this claim is rejected for the same reason as claim 14 above. 

22. As to claim 25, this claim is rejected for the same reason as claims 20-21 above. 

23. Claim 18 is rejected under 35 U.S.C. 103(a) as being unpatentable over Boswell and Van 
Huben as applied to claims 14 and 22 above, in view of Sanghvi et al (hereafter Sanghvi) (U.S. 
PGPub 20020095524A1). 

24. Sanghvi was cited in the last office action. 

25. As to claim 18, Boswell does not specifically teach analyzing the effect a particular 
setting of one of the policy objects will have on a particular target represented as a directory 
service object before the particular setting is implemented in the directory service. However, 
Sanghvi teaches testing policies before applying the policies to the target nodes [Sanghvi, 
paragraph 46, lines 3-4; 406, Fig. 5]. 

26. It would have been obvious to one of an ordinary skill in the art at the time the invention 
was made, to have combined the teaching of Boswell, Van Huben and Sanghvi because the 
teaching of Sanghvi would provide an error prevention/detection mechanism that tests the effect 
of policies before they are actually implemented on the target. 
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Response to Arguments 

27. Applicant's arguments filed 6/19/06 and in the Appeal Brief that still applies to the 
current rejection have been fully considered but they are not persuasive. 

28. In the remarks, Applicant argued in substance that: 

a. The subject matter rejected under 35 U.S.C. 112 are supported in the 
specification. 

b. The office action failed to established a prima facie case of obviousness as a 
proper motivation to combine the references. 

c. Combination of the references would not disclose or suggest the recitations of 
detecting a problem with a selected one of the plurality of policy objects; and restoring 
the selected one of the plurality of policy objects without restoring others of the plurality 
of policy objects. 

29. Examiner respectfully traversed Applicant's remarks: 

30. As to points (a), Applicant's remark, filed 6/19/06, with respect to the outstanding 35 
U.S.C 1 12 rejection have been fully considered and are persuasive. Therefore, the rejection has 
been withdrawn. 

31. As to point (b), Boswell teaches backing up and restoring the directory service (Active 
Directory) and the drawback of the inability to backup or restore just the Registry or just the 
Directory or just the boot files [Chap. 1 1, Backing Up the Directory, pg. 1]. Van Huben teaches 
restoring individual data objects from backed-up or archived repositories in the event the data 
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object is deleted from the active library [Van Huben, col. 26, lines 23-43]. It would have been 
obvious to one of an ordinary skill in the art at the time the invention was made, to have 
combined the teaching of Boswell with the teaching of Van Huben because the teaching of Van 
Huben compensate the drawback of Boswell by providing the ability to recover only those 
objects that are needed or individual objects that has a problem. Additionally, Boswell teaches 
configuring security policies, how different policies (local and group) affects local computers 
and computers in a network, and the effect of editing the policies [Chap. 6, Configuring Security 
Policies] and Sanghvi teaches testing policies before applying the policies to the target nodes 
[Sanghvi, paragraph 46, lines 3-4; 406, Fig. 5]. It would have been obvious to one of an ordinary 
skill in the art at the time the invention was made, to have combined the teaching of Boswell in 
view of Van Huben with Sanghvi because the teaching of Sanghvi would provide an error 
prevention/detection mechanism that tests the effect of policies before they are actually 
implemented on the target. 

32. As to point (c), Van Huben teaches restoring individual data objects from backed-up or 
archived repositories in the event the data object is deleted from the active library [Van Huben, 
col. 26, lines 23-43], in combination with Boswell which teaches configuring and managing 
policy objects which are associated with the directory [Chap. 6, Configuring Security Policies; 
Fig. 16.6, Chapter 16, Functional Description of User and Computer Group Policies], the 
examiner believed the above limitation is met. 
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33. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Qing-Yuan Wu whose telephone number is (571) 272-3776. The 
examiner can normally be reached on 8:30am-6:00pm Monday-Thursday and alternate Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Thomson can be reached on (571) 272-3718. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Qing-Yuan Wu 



Examiner 
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